質問編集履歴
4
Certbot削除⇒再度Certbot導入時の挙動の追記,ドメイン入力があっているか,Document root情報の付記
title
CHANGED
|
File without changes
|
body
CHANGED
|
@@ -127,7 +127,7 @@
|
|
|
127
127
|
知恵を貸していただけないでしょうか...
|
|
128
128
|
よろしくお願いします.
|
|
129
129
|
|
|
130
|
-
2018/08/15 追記：
|
|
130
|
+
2018/08/15 追記1：
|
|
131
131
|
先ほど追記点としてCertbotのエラーログについて再度実行して取得するという形でログを掲載しましたが,
|
|
132
132
|
・昨日実行時は確認メールアドレスまで聞かれたので明らかに今日のとログ内容が違う
|
|
133
133
|
・そもそも再度実行して得られたログに意味があるか？
|
|
@@ -137,7 +137,92 @@
|
|
|
137
137
|
一旦CertBotを削除して,apache2の設定ファイルも手動で書き直し,
|
|
138
138
|
まずはApache2自体が以前と同じように動くようにしたほうがいいんでしょうか...
|
|
139
139
|
|
|
140
|
+
2018/08/15 追記2：
|
|
141
|
+
Certbotを消しただけではやはりapache2は再起動できず.(どこか.confファイルを手動で書き直す必要か)
|
|
142
|
+
念のため：Certbot削除⇒Certbot導入時に出たログの確認
|
|
143
|
+
メールアドレスが聞かれただけで再導入時と導入時で特にログに違いはなさそう
|
|
144
|
+
また,ドメイン,ドキュメントルートの記法が違うかもと思い一応情報を記す
|
|
145
|
+
WordPressのルートがvar/wwwだから大丈夫だと思っているけど心配なので
|
|
140
146
|
|
|
147
|
+
以下それぞれ
|
|
148
|
+
mydns.jpで登録してる様子,apache2.confのドキュメントルートの記述箇所,
|
|
149
|
+
Certbot再導入時のログ
|
|
150
|
+
|
|
151
|
+
```
|
|
152
|
+
# Sets the default security model of the Apache2 HTTPD server. It does
|
|
153
|
+
# not allow access to the root filesystem outside of /usr/share and /var/www.
|
|
154
|
+
# The former is used by web applications packaged in Debian,
|
|
155
|
+
# the latter may be used for local directories served by the web server. If
|
|
156
|
+
# your system is serving content from a sub-directory in /srv you must allow
|
|
157
|
+
# access here, or in any related virtual host.
|
|
158
|
+
<Directory />
|
|
159
|
+
Options FollowSymLinks
|
|
160
|
+
AllowOverride None
|
|
161
|
+
Require all denied
|
|
162
|
+
</Directory>
|
|
163
|
+
|
|
164
|
+
<Directory /usr/share>
|
|
165
|
+
AllowOverride None
|
|
166
|
+
Require all granted
|
|
167
|
+
</Directory>
|
|
168
|
+
|
|
169
|
+
<Directory /var/www/> (ココ)
|
|
170
|
+
Options Indexes FollowSymLinks
|
|
171
|
+
AllowOverride None
|
|
172
|
+
Require all granted
|
|
173
|
+
#AddHandler .php
|
|
174
|
+
</Directory>
|
|
175
|
+
|
|
176
|
+
#<Directory /srv/>
|
|
177
|
+
# Options Indexes FollowSymLinks
|
|
178
|
+
# AllowOverride None
|
|
179
|
+
# Require all granted
|
|
180
|
+
#</Directory>
|
|
181
|
+
```
|
|
182
|
+
|
|
183
|
+
```
|
|
184
|
+
root@raspi:/home/pi# certbot certonly --webroot -w /var/www/ -d raspberrypi422.mydns.jp
|
|
185
|
+
|
|
186
|
+
Saving debug log to /var/log/letsencrypt/letsencrypt.log
|
|
187
|
+
Enter email address (used for urgent renewal and security notices) (Enter 'c' to
|
|
188
|
+
cancel):kang.dream.123456789@gmail.com
|
|
189
|
+
|
|
190
|
+
-------------------------------------------------------------------------------
|
|
191
|
+
Please read the Terms of Service at
|
|
192
|
+
https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf. You must
|
|
193
|
+
agree in order to register with the ACME server at
|
|
194
|
+
https://acme-v01.api.letsencrypt.org/directory
|
|
195
|
+
-------------------------------------------------------------------------------
|
|
196
|
+
(A)gree/(C)ancel: a
|
|
197
|
+
Obtaining a new certificate
|
|
198
|
+
Performing the following challenges:
|
|
199
|
+
http-01 challenge for raspberrypi422.mydns.jp
|
|
200
|
+
Using the webroot path /var/www for all unmatched domains.
|
|
201
|
+
Waiting for verification...
|
|
202
|
+
Cleaning up challenges
|
|
203
|
+
Failed authorization procedure. raspberrypi422.mydns.jp (http-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Fetching http://raspberrypi422.mydns.jp/.well-known/acme-challenge/UFuQsEmfmFEnHAMm8jQS5sMF7ZjEH9Y-qXDZJJ3HH24: Connection refused
|
|
204
|
+
|
|
205
|
+
IMPORTANT NOTES:
|
|
206
|
+
- If you lose your account credentials, you can recover through
|
|
207
|
+
e-mails sent to ？？？？？？？？？？(適当なメールアドレス)
|
|
208
|
+
The following errors were reported by the server:
|
|
209
|
+
|
|
210
|
+
Domain: raspberrypi422.mydns.jp
|
|
211
|
+
Type: connection
|
|
212
|
+
Detail: Fetching
|
|
213
|
+
http://raspberrypi422.mydns.jp/.well-known/acme-challenge/UFuQsEmfmFEnHAMm8jQS5sMF7ZjEH9Y-qXDZJJ3HH24:
|
|
214
|
+
Connection refused
|
|
215
|
+
|
|
216
|
+
To fix these errors, please make sure that your domain name was
|
|
217
|
+
entered correctly and the DNS A record(s) for that domain
|
|
218
|
+
contain(s) the right IP address. Additionally, please check that
|
|
219
|
+
your computer has a publicly routable IP address and that no
|
|
220
|
+
firewalls are preventing the server from communicating with the
|
|
221
|
+
client. If you're using the webroot plugin, you should also verify
|
|
222
|
+
that you are serving files from the webroot path you provided.
|
|
223
|
+
```
|
|
224
|
+
何度も何度も編集して申し訳ない...;;
|
|
225
|
+
|
|
141
226
|
### 補足情報（FW/ツールのバージョンなど）
|
|
142
227
|
・debian ver 9.4
|
|
143
228
|
・Apache Server version: Apache/2.4.25 (Raspbian)
|
3
無意味なエラーログの削除,方針の転換案
title
CHANGED
|
File without changes
|
body
CHANGED
|
@@ -128,45 +128,16 @@
|
|
|
128
128
|
よろしくお願いします.
|
|
129
129
|
|
|
130
130
|
2018/08/15 追記：
|
|
131
|
-
|
|
131
|
+
先ほど追記点としてCertbotのエラーログについて再度実行して取得するという形でログを掲載しましたが,
|
|
132
|
-
※raspberrypi422.mydns.jp 私がhttp://www.mydns.jp/で取得したdomain
|
|
133
|
-
※domainの書き方がいけない...?感じかと思ったのでmydnsにはこう書いてありますよという画像を添えておきます
|
|
134
|
-
|
|
132
|
+
・昨日実行時は確認メールアドレスまで聞かれたので明らかに今日のとログ内容が違う
|
|
135
|
-
|
|
133
|
+
・そもそも再度実行して得られたログに意味があるか？
|
|
134
|
+
という理由から削除しました.
|
|
136
135
|
|
|
136
|
+
SSLなど詳しくなく,前回のCertbotのログも流れてしまっているので
|
|
137
|
+
一旦CertBotを削除して,apache2の設定ファイルも手動で書き直し,
|
|
138
|
+
まずはApache2自体が以前と同じように動くようにしたほうがいいんでしょうか...
|
|
137
139
|
|
|
138
|
-
```
|
|
139
|
-
root@raspi:/home/pi# certbot certonly --webroot -w /var/www/ -d raspberrypi422.mydns.jp
|
|
140
140
|
|
|
141
|
-
Saving debug log to /var/log/letsencrypt/letsencrypt.log
|
|
142
|
-
Obtaining a new certificate
|
|
143
|
-
Performing the following challenges:
|
|
144
|
-
http-01 challenge for raspberrypi422.mydns.jp
|
|
145
|
-
Using the webroot path /var/www for all unmatched domains.
|
|
146
|
-
Waiting for verification...
|
|
147
|
-
Cleaning up challenges
|
|
148
|
-
Failed authorization procedure. raspberrypi422.mydns.jp (http-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Fetching http://raspberrypi422.mydns.jp/.well-known/acme-challenge/lTWzpTSklOeodzW2oWJYmad0VAUvQ_XGuNGlCMTf9Go: Connection refused
|
|
149
|
-
|
|
150
|
-
IMPORTANT NOTES:
|
|
151
|
-
- The following errors were reported by the server:
|
|
152
|
-
|
|
153
|
-
Domain: raspberrypi422.mydns.jp
|
|
154
|
-
Type: connection
|
|
155
|
-
Detail: Fetching
|
|
156
|
-
http://raspberrypi422.mydns.jp/.well-known/acme-challenge/lTWzpTSklOeodzW2oWJYmad0VAUvQ_XGuNGlCMTf9Go:
|
|
157
|
-
Connection refused
|
|
158
|
-
|
|
159
|
-
To fix these errors, please make sure that your domain name was
|
|
160
|
-
entered correctly and the DNS A record(s) for that domain
|
|
161
|
-
contain(s) the right IP address. Additionally, please check that
|
|
162
|
-
your computer has a publicly routable IP address and that no
|
|
163
|
-
firewalls are preventing the server from communicating with the
|
|
164
|
-
client. If you're using the webroot plugin, you should also verify
|
|
165
|
-
that you are serving files from the webroot path you provided.
|
|
166
|
-
```
|
|
167
|
-
|
|
168
|
-
|
|
169
|
-
|
|
170
141
|
### 補足情報（FW/ツールのバージョンなど）
|
|
171
142
|
・debian ver 9.4
|
|
172
143
|
・Apache Server version: Apache/2.4.25 (Raspbian)
|
2
先ほどの編集で書きそびれていたことの追記
title
CHANGED
|
File without changes
|
body
CHANGED
|
@@ -130,9 +130,11 @@
|
|
|
130
130
|
2018/08/15 追記：
|
|
131
131
|
指摘されて気になったのでCertbotのコマンドについてもういちど実行しエラーログを取得してきました
|
|
132
132
|
※raspberrypi422.mydns.jp 私がhttp://www.mydns.jp/で取得したdomain
|
|
133
|
+
※domainの書き方がいけない...?感じかと思ったのでmydnsにはこう書いてありますよという画像を添えておきます
|
|
134
|
+
※Wordpressはvar/www/にインストールされています
|
|
133
135
|
|
|
134
|
-
※domainの書き方がいけない...?感じかと思ったのでmydnsにはこう書いてありますよという画像を添えておきます
|
|
135
136
|
|
|
137
|
+
|
|
136
138
|
```
|
|
137
139
|
root@raspi:/home/pi# certbot certonly --webroot -w /var/www/ -d raspberrypi422.mydns.jp
|
|
138
140
|
|
1
指摘されたCertbotについて 導入でエラーが発生してそうだったので再度コマンドを入力してログの掲載,domainの書き方が悪かったかなと思いサイトに取る臆されている情報も問題がない範囲で添えました
title
CHANGED
|
File without changes
|
body
CHANGED
|
@@ -127,6 +127,44 @@
|
|
|
127
127
|
知恵を貸していただけないでしょうか...
|
|
128
128
|
よろしくお願いします.
|
|
129
129
|
|
|
130
|
+
2018/08/15 追記：
|
|
131
|
+
指摘されて気になったのでCertbotのコマンドについてもういちど実行しエラーログを取得してきました
|
|
132
|
+
※raspberrypi422.mydns.jp 私がhttp://www.mydns.jp/で取得したdomain
|
|
133
|
+
|
|
134
|
+
※domainの書き方がいけない...?感じかと思ったのでmydnsにはこう書いてありますよという画像を添えておきます
|
|
135
|
+
|
|
136
|
+
```
|
|
137
|
+
root@raspi:/home/pi# certbot certonly --webroot -w /var/www/ -d raspberrypi422.mydns.jp
|
|
138
|
+
|
|
139
|
+
Saving debug log to /var/log/letsencrypt/letsencrypt.log
|
|
140
|
+
Obtaining a new certificate
|
|
141
|
+
Performing the following challenges:
|
|
142
|
+
http-01 challenge for raspberrypi422.mydns.jp
|
|
143
|
+
Using the webroot path /var/www for all unmatched domains.
|
|
144
|
+
Waiting for verification...
|
|
145
|
+
Cleaning up challenges
|
|
146
|
+
Failed authorization procedure. raspberrypi422.mydns.jp (http-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Fetching http://raspberrypi422.mydns.jp/.well-known/acme-challenge/lTWzpTSklOeodzW2oWJYmad0VAUvQ_XGuNGlCMTf9Go: Connection refused
|
|
147
|
+
|
|
148
|
+
IMPORTANT NOTES:
|
|
149
|
+
- The following errors were reported by the server:
|
|
150
|
+
|
|
151
|
+
Domain: raspberrypi422.mydns.jp
|
|
152
|
+
Type: connection
|
|
153
|
+
Detail: Fetching
|
|
154
|
+
http://raspberrypi422.mydns.jp/.well-known/acme-challenge/lTWzpTSklOeodzW2oWJYmad0VAUvQ_XGuNGlCMTf9Go:
|
|
155
|
+
Connection refused
|
|
156
|
+
|
|
157
|
+
To fix these errors, please make sure that your domain name was
|
|
158
|
+
entered correctly and the DNS A record(s) for that domain
|
|
159
|
+
contain(s) the right IP address. Additionally, please check that
|
|
160
|
+
your computer has a publicly routable IP address and that no
|
|
161
|
+
firewalls are preventing the server from communicating with the
|
|
162
|
+
client. If you're using the webroot plugin, you should also verify
|
|
163
|
+
that you are serving files from the webroot path you provided.
|
|
164
|
+
```
|
|
165
|
+
|
|
166
|
+
|
|
167
|
+
|
|
130
168
|
### 補足情報（FW/ツールのバージョンなど）
|
|
131
169
|
・debian ver 9.4
|
|
132
170
|
・Apache Server version: Apache/2.4.25 (Raspbian)
|